I've been searching around all day on the web but found nothing.In my web.config I set:\[code\]<modules runAllManagedModulesForAllRequests="false">\[/code\]And \[code\]<add name="MyModule" type="namespace.to.MyModule" preCondition="managedHandler" />\[/code\]And this is preventing MyModule (hooked to PostAuthenticateRequest in this example) from being fired on static resources like images, css, js and so on.But the module is still fired by .axd files inside the page, in particular it's fired from WebResource.axd